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PATENT APPLICATION 
IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

In re application of 

Dominique Helena Lucia CHANTRAIN, et al. Attorney Docket Q60803 
Appln. No.: Not yet assigned Group Art Unit: Not yet assigned 

Filed: September 20, 2000 Examiner: Not yet assigned 

For: METHOD FOR CONNECTING A FIRST USER-TERMINAL TO A SECOND USER- 
TERMINAL, RELATED DEVICES AND RELATED SOFTWARE MODULES 

PRELIMINARY AMENDMENT 

Assistant Commissioner for Patents 
Washington, D.C. 20231 

Sir: 

Prior to examination, please amend the above-identified application as follows: 
IN THE SPECIFICATION; 

Page 1, after the title insert the heading —Background of the Invention--. 

lines 5-7 (according to the line numbering shown), delete the paragraph in its 
entirety and insert: 

-The present invention relates to a method for connecting user terminals to one 
another over a network containing a plurality of user-terminals and a respective 
plurality of network access servers, and also relates to a network access server and 
subscriber data service for implementing such a method. The invention further 
relates to a user terminal included in such a network, and to software running on 
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the processing systems in the subscriber data service or the user terminal for 
implementing the method. — 

after line 27, insert the heading —Summary of the Invention--. 
Page 2, lines 3-27, delete in their entirety and insert: 

-According to the invention, this object is achieved by a method for connecting 
a first and second user terminals to one another over a network (e.g., the internet) 
containing a respective plurality of network access servers, characterised in that a 
subscriber data server is added to the network and that the necessary connection 
information is made available enabling determination of the location of the second (i.e., 
to be connected) user-terminal. The subscriber data server is able to store and retrieve 
information as to which network access server the second user-terminal is connected to 
and the virtual private network the second user-terminal forms part of. At a connection 
request from a user-terminal forming part of a different virtual private network, the 
subscriber data server retrieves the connection information about the second user- 
terminal in order to locate this user-terminal. Subsequently, the subscriber data server 
forwards a connection request to the located second user-terminal. The second user- 
terminal in its turn decides on accepting the incoming call. If the incoming call is 
accepted, the second user-terminal forwards a request to the network access server it is 
connected to, to switch its connection from its current virtual private network to the first 
virtual private network. At the moment the switch is performed, both user-terminals 
form part of the same virtual private network. Then they are able to establish a 
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communication because address information of the second user-terminal is available and 

accessible for the first user-terminal in this context. 

The invention further resides in a network access server, subscriber data server 

and second user terminal configured to perform the above-described method. 

Another characteristic feature of the present invention is that the connection 

request of the first user-terminal may be sent from-; 

Page 2, line 31, delete ",as". 

Page 3, line 1, delete "described in claim 3,"; 

lines 5-7, delete in their entirety and insert: 

—In accordance with a further aspect of the invention, the connection request of 
the first user-terminal may be sent from--; 

after line 15, insert the heading —Brief Description of the Drawings—, 
after line 25, insert the heading -Detailed Description of the Invention-. 

IN THE ABSTRACT: 

Please delete the Abstract in its entirety and replace with the Abstract on the following 

page. 
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ABSTRACT 

A method and related apparatus for connecting first and second user-terminals to one 
another over a network (e.g., the internet) containing a plurality of user-terminals and a plurality 
of respective network access servers. When the second user-terminal connects to its respective 
network access server, this network access server sends connection information to the subscriber 
data server which updates its database with this connection information. The subscriber data 
server handles an incoming call request, from a first user-terminal connected to a first virtual 
private network, to establish a connection between the first user-terminal and the second user- 
terminal that is connected to a second virtual private network. The subscriber data server at first 
searches in its database for connection information of the second user-terminal and then 
determines the respective network access server that is connected to the second user-terminal 
based on the determined connection information. Then the second user-terminal is notified about 
the request for communication by the first user-terminal, and then initiates and controls a switch- 
over of the connection of the second user- terminal from the second virtual private network to the 
first virtual private network. The respective network access server of the second user-terminal 
switches the connection of the second user-terminal from the second virtual private network to 
the first virtual private network. Then at the switch-over of the connection of the second user- 
terminal from the second virtual private network to the first virtual private network there is also 
connection information sent by the adjacent respective network access server to the subscriber 
data server. 
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REMARKS 


Entry and consideration of this Amendment is respectfully requested. 


2100 Pennsylvania Avenue, N.W. 
Washington, D.C. 20037-3213 
Telephone: (202) 293-7060 
Facsimile: (202) 293-7860 

Date: September 20, 2000 


Respectfully submitted, 


SUGHRUE, MION, ZINN, 
MACPEAK & SEAS, PLLC 
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METHOD FOR CONNECTING A FIRST USER-TERMINAL TO A SECOND 


USER-TERMINAL, RELATED DEVICES AND RELATED SOFTWARE 
MODULES 


5 The present invention relates to a connecting method as described in 

the preamble of claim 1 and the related devices as described in the preamble of 
claims 6, 8, 10, 11, 12 and 13. 

Such a method for connecting a first user-terminal to a second user- 
terminal is already known in the art, e.g. from the internet draft document "A 

1 0 FRAMEWORK FOR IP BASED VIRTUAL PRIVA TE NETWORKS" from the 
authors Bryan Gleeson et al, published in February 1999 by the Internet 
Engineering Task Force (IETF). Therein, a virtual private network is constituted 
by configuring all network access server access links, called stub-links in the 
referred draft, with the identity of the particular virtual private network whereto 

1 5 the access link of the network access server belongs. 

In this way each user-terminal is assigned to a particular virtual 
private network in a static way. Each of the user-terminais assigned to a 
common virtual private network are able to establish a communication with any 
other user-terminal assigned to the same virtual private network because 

20 information on the address of each connected user-terminal, called reachability 
information is available within the virtual private network. 

At the moment there is a first user-terminal being assigned to a first 
virtual private network willing to establish a communication with a second user- 
terminal being assigned to a second virtual private network there is no way of 

25 connecting both user-terminals in order to establish a communication because 
there is no information available on the address of the second assigned to the 
second virtual private network. 

An object of the present invention is to provide a method of the 
above known type, a system, a network access server, a subscriber data server 

30 and a second user-terminal adapted to perform this method, but wherein 

access from a first user-terminal connected to a first virtual private network is 
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able to connect to a second user-terminal connected to a second virtual private 
network. 

According to the invention, this object is achieved by the method 
described in claim 1 , the network access server described in claim 6 and 8, the 
5 subscriber data server described in claim 10 and 12 and the second user- 
terminal as described in claim 11 and 13. 

Indeed, due to the fact that a subscriber data server is added to the 
network and that the necessary connection information is made available 
enabling to determine the location of the second, to be connected user- 

10 terminal. This network element, the subscriber data server is able to store and 
retrieve information on which the network access server the second user- 
terminal is connected to and the virtual private network the meant user-terminal 
forms part of. At a connection request from a user-terminal forming part of a 
different virtual private network, the subscriber data server retrieves the 

15 connection information about the second user-terminal in order to locate this 
user-terminal. Subsequently the subscriber data server forwards a connection 
request to the located second user-terminal. The second user-terminal in its 
turn decides on accepting the incoming call. If the incoming call is accepted, the 
user-terminal forwards a request to the network access server the user-terminal 

20 is connected to, to switch its connection from the current virtual private network 
to the first virtual private network. At the moment the switch is performed, both 
user-terminals form part of the same virtual private network. Then they are able 
to establish a communication because address information of the second user- 
terminal is available and accessible for the first user-terminal in this context. 

25 Another characteristic feature of the present invention is described in 

claims 2 and 7 and in claim 3. 

The connection request of the first user-terminal may be sent from 
the subscriber data server to the second user-terminal via the network access 
server where this network access server in a active way forwards the 

30 connection request received from the subscriber data server to the second 
user-terminal. On the other hand the connection request may be passed, as 
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described in claim 3, over a transparent connection between the subscriber 
data server and the second user-terminal via the network access server. These 
are alternative solution for the transfer of the connection request between the 
subscriber data server and the second user-terminal. 
5 Further characteristic features of the present invention are 

mentioned in claims 4, 8 and 9 and in claim 5. 

The connection request of the first user-terminal may be sent from 
the first user-terminal to subscriber data server via the network access server 
where this network access server in a active way forwards the connection 
10 request received from first user-terminal to the subscriber data server. On the 
other hand the connection request may be passed, as described in claim 5, 
over a transparent connection between the first user-terminal and the 
subscriber data server via the network access server connected to the first 
user-terminal. These are alternative solution for the transfer of the connection 
15 request between the first user-terminal and the subscriber data server. 

The above and other objects and features of the invention will 
become more apparent and the invention itself will be best understood by 
referring to the following description of an embodiment taken in conjunction with 
the accompanying drawings wherein: 
20 FIG. 1 represents an internet network INW wherein the 

implementation of the present invention is realised; 

FIG. 2 represents the network access sever NASI of FIG. 1; 

FIG. 3 represents the subscriber data server SDS of FIG. 1; 

FIG. 4 represents the second user-terminal UT2 of FIG. 1; and 
25 FIG. 5 represents the network access server NAS2 of FIG. 1 . 

In the following paragraphs, referring to the drawings, an 
implementation of the method and the related devices according to the present 
invention will be described. In the first paragraph of this description the main 
elements of this network as presented in FIG. 1 are described. In the second 
30 paragraph, all connections between the before mentioned network elements 
and described means are defined. In the succeeding paragraph the actual 


execution of the method for connecting a first user-terminal to a second user- 
terminal is described. 

An essential element of this embodiment of the present invention is a 
network constituted by the internet network INW. Further there is a number of 
5 user-terminals, but in order to keep simplicity in this description only two user- 
terminals UT1, UT2 are presented. Both user-terminals UT1 and UT2 are 
chosen to be a personal computer with a belonging screen and keyboard. 
Additionally there is a number of access nodes connecting each of the user- 
terminals to the internet network INW and taking care of subscription of the 

10 connected user-terminals to a virtual private network. Concerning these access 
nodes, also because of reasons of simplicity only three access nodes NASI, 
NAS2 and NAS3 are described and presented in FIG. 1. These access nodes 
NASI , NAS2 and NAS3 are chosen to be network access servers. 

User-terminal UT2 is connected to network access server NASI via 

15 an Internet protocol link, further referred to as an IP-link. User-terminal UT1 is 
connected to network access server NAS2 via an IP-link. The network access 
servers NASI, NAS2 and NAS3 each constitute the edge of the internet 
network INW and are all interconnected via the internet network. The 
subscriber data server SDS is connected to each of the network access servers 

20 NASI , NAS2 and NAS3 over an IP-link. 

The network access node NASI as presented in FIG. 2. is built up of 
the switch notification reception means SNRM, that is able to receive a request 
from the second user-terminal UT2 to initiate a switch-over of the connection of 
the second user-terminal UT2 from a second virtual private network to a first 

25 virtual private network, the switching means SM that is adapted to perform the 
switch of the connection of the second user-terminal from a second virtual 
private network to a first virtual private network and a user-terminal connect 
notification sending means HCNSM that is adapted to send registration 
information to the subscriber data server at connecting or changing of the 

30 subscribed virtual private network of the second user-terminal to the respective 
network access server NASI . 
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The switch notification reception means SNRM has an input-terminal 
that is at the same time also an input-terminal l 4 of network access server 
NASI . The switch notification reception means SNRM further is coupled to the 
switching means SM which in its turn is coupled to the user-terminal connect 
5 notification sending means HCNSM, that has an output-terminal which at the 
same time is an output-terminal O 0 of the network access server NASI . 

This network access server NASI optionally has the following 
means. At first there is a connection establishment request reception means 
CERRM1 that is adapted to receive a connection request from the subscriber 

10 data server to establish a connection between the first user-terminal UT1 

connected to a first virtual private network and the second user-terminal UT2 
connected to a second virtual private network. Further there is a connection 
establishment request sending means CERSM1 that is able to notify the 
second user-terminal UT2 about an incoming call from the first user-terminal 

15 UT1. 

The connection establishment request reception means CERRM1 
has an input-terminal that at the same time is an input-terminal l 2 0 f the network 
access server NASI. The connection establishment request reception means 
CERRM1 in its turn is coupled to the connection establishment request sending 

20 means CERSM2 that subsequently has an output-terminal that is at the same 
time an output-terminal 0 2 of the network access server NASI. 

Besides these means the network access node NASI as presented 
in FIG. 2. may also comprise a connection establishment request reception 
means CERRM2, that is adapted to receive a connection request from the 

25 second user-terminal to establish a connection between the second user- 
terminal connected to the second virtual private network and the first user- 
terminal connected to a first virtual private network and a belonging connection 
establishment request sending means CERSM3, that is adapted to notify the 
subscriber data server about an incoming call from the second user-terminal. 

30 The connection establishment request reception means CERRM2 

has an input-terminal that at the same time is an input-terminal l 4 of the network 
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access server NASI. The connection establishment request reception means 
CERRM2 in its turn is coupled to the connection establishment request sending 
means CERSM3 that subsequently has an output-terminal that is at the same 
time an output-terminal 0 4 of the network access server NASI. These latest 
5 mentioned means optionally are to be included in a network access server and 
excluding all other, previously mentioned means. 

Network access server NAS2 and Network access server NAS3 have 
the same structure as the Network access server NASI as previously 
described. 

10 The Subscriber Data Server SDS as presented in FIG. 3 is built-up of 

the user-terminal connect notification reception means UTCNRM that is able to 
receive the connection information sent at connecting of the second user- 
terminal UT2 to network access server NASI or at switching a connection from 
one virtual private network to another. The user-terminal connect notification 

15 updating means UTCNUM is adapted to update the database DB of the 
subscriber data server with the connection information. Further there is a 
connection establishment request reception means CERRM that is able to 
receive a connection request from the first user-terminal UT1 to establish a 
connection between the first user-terminal connected to a first virtual private 

20 network and the second user-terminal connected to a second virtual private 
network. The registration information searching means RISM is adapted to 
search in the database DB of the subscriber data server SDS for recent 
registration information of the second user-terminal UT2, and the connection 
establishment request sending means CERSM1 , that is adapted to notify the 

25 second user-terminal about an incoming call from a first user-terminal. 

The user-terminal connect notification reception means UTCNRM 
has an input-terminal that is at the same time an input-terminal lo of the 
subscriber data server SDS. This user-terminal connect notification updating 
means UTCNRM is coupled to the user-terminal connect notification updating 

30 means UTCNUM which also has an output-terminal that is at the same time is 
an input/output-terminal I/0 1 of the subscriber data server SDS. 
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The connection establishment request reception means CERRM has 
an input-terminal that is at the same time an input-terminal \i of the subscriber 
data server SDS and is coupled to the registration information searching means 
RISM. This registration information searching means RISM, has an input- 
5 terminal that at the same time is an input/output-terminal l/Oi of the subscriber 
data server SDS and further is coupled to the connection establishment request 
sending means CERSM1. The connection establishment request sending 
means CERSM1 has an output-terminal that is at the same time an output- 
terminal O1 of the subscriber data server SDS. 

10 The second user-terminal UT2 as presented in FIG. 4 is built-up of 

the connection establishment request reception means CERRM3, which is able 
to receive a connection request from the subscriber data server SDS to 
establish a connection between the first and the second user-terminal, and an 
incoming call handling means ICHM that is adapted to handle the connection 

1 5 request from the first user-terminal. At last there is a switch requesting means 
SRM that is adapted to request the respective network access server to switch 
the connection of the second user-terminal UT2 from the second virtual private 
network to the first virtual private network. 

The connection establishment request reception means CERRM3 has an input- 
20 terminal that is at the same time an input-terminal l 3 of this second user- 
terminal UT2. Further, the connection establishment request reception means 
CERRM3 is coupled to the incoming call handling means ICHM, that in its turn 
is coupled to the switch requesting means SRM. The switch requesting means 
SRM has an output-terminal that is coupled to an output-terminal O3 of the 
25 second user-terminal UT2. 

The network access server NAS2 as presented in FIG. 5 may 
alternatively being built up of a connection establishment request reception 
means CERRM4 that is adapted to receive a connection request from the first 
user-terminal UT1 to establish a connection between the first user-terminal UT1 
30 that is connected to the first virtual private network and the second user- 
terminal UT2 that is connected to the second virtual private network and further 
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a connection establishment request sending means CERSM4 that is adapted to 
notify the subscriber data server SDS about an incoming call from the first user- 
terminal UT1 . 

The connection establishment request reception means CERRM4 
5 has an input-terminal that at the same time is an input-terminal I5 of the network 
access server NAS2. The connection establishment request reception means 
CERRM4 in its turn is coupled to the connection establishment request sending 
means CERSM4 that subsequently has an output-terminal that is at the same 
time an output-terminal 0 5 of the network access server NAS2. 

1 0 In order to explain the actual operation of the present invention it is 

assumed that a second user-terminal UT2 is connected to network access 
server NASI and is connected to a second virtual private network. It is further 
assumed that another user-terminal, a first user-terminal UT1 connected to 
network access server NAS2 and forms part of a first virtual private network 

15 tries to contact the second user-terminal UT2. 

According procedures that are well known in the art by the persons 
skilled in the art and therefor not described, the first user-terminal UT1 tries to 
obtain the Internet address, further referred to as the IP-address, of the to be 
contacted second user-terminal UT2. 

20 Because both user-terminals are not connected to the same virtual 

private network it is not possible to connect both user-terminals. The first user- 
terminal will request the subscriber data server SDS for a connection to this 
second user-terminal by sending the connection request over a transparent 
connection between the first user-terminal and the subscriber data server via 

25 the network access server NAS2. 

Alternatively the connection request can be sent to a connection 
establishment request reception means of network access sever NAS2 that 
receives this connection request from the first user-terminal to establish a 
connection between the first user-terminal connected to a first virtual private 

30 network and the second user-terminal connected to the second virtual private 
network. Subsequently the connection establishment request sending means of 
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network access sever NAS2 notifies the subscriber data server about an 
incoming call from the first user-terminal. 

This may also be performed by the connection establishment request 
reception means CERRM4 of NAS2 that receives this connection request from 
5 the first user-terminal UT1 to establish a connection between the first user- 
terminal connected to a first virtual private network and the second user- 
terminal connected to the second virtual private network. Subsequently the 
connection establishment request sending means CERSM4 notifies the 
subscriber data server about an incoming call from the first user-terminal. 

10 The connection establishment request reception means CERRM of 

the subscriber data server SDS receives this connection request from the first 
user-terminal. Subsequently the registration information searching means RISM 
starts searching in the belonging database DB of the subscriber data server 
SDS for connection information of this second user-terminal UT2. 

15 The user-terminal connect notification sending means HCNSM 

sends connection information to the user-terminal connect notification reception 
means UTCNRM of the subscriber data server SDS at connecting of the 
second user-terminal to the respective network access server NASI or at 
switch-over to another virtual private network. The user-terminal connect 

20 notification reception means UTCNRM of the subscriber data server SDS 
receives this registration and forwards it to the user-terminal connect 
notification updating means UTCNUM that updates the database DB of the 
subscriber data server SDS with the recently received connection information. 
This registration information contains information to which network access 

25 server a user-terminal is connected and which virtual private network that user- 
terminal forms part of. There is also a list maintained for each user on which 
virtual private network the user has a subscription on. 

The connection information searching means RISM then retrieves 
the connection information of the second user-terminal UT2. This connection 

30 information contains the information that the user of second user-terminal UT2 
amongst others has also a subscription to the first virtual private network and 
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that this second user-terminal UT2 is connected to network access server 
NASI and that it currently is connected to the second virtual private network. 
Using this information, the connection establishment request sending means 
CERSM1 will notify the second user-terminal UT2 about an incoming call from 
5 the first user-terminal UT1 via a transparent connection between the subscriber 
data server SDS and the second user-terminal UT2 via network access server 
NASI. 

The notification of the second user-terminal UT2 about an incoming 
call from the first user-terminal UT1 may alternatively be done by sending the 

10 incoming call notification to the connection establishment request reception 
means CERRM1 that receives a connection request from the subscriber data 
server to establish the connection between the first user-terminal connected to 
the first virtual private network and the second user-terminal connected to the 
second virtual private network via the network access server. Subsequently the 

15 connection establishment request sending means CERSM2 notifies the second 
user-terminal about an incoming call from the first user-terminal. 

The connection establishment request reception means CERRM3 of 
the second user-terminal receives the connection request sent by subscriber 
data server SDS and subsequently forwards this notification to the incoming call 

20 handling means ICHM that handles this connection request from the first user- 
terminal by, assume a pop-up screen requesting the user of the second user- 
terminal UT2 to accept an incoming call from this first user-terminal and 
postpone or finish the ongoing communication. If the user decides to accept the 
incoming call from the first user-terminal the current communication is finished 

25 and the switch requesting means SRM, of the second user-terminal requests 
the network access server NASI to switch the connection of the second user- 
terminal from the second virtual private network to the first virtual private 
network. The switch notification reception means SNRM, receives the request 
from the second user-terminal to initiate a switch-over of the connection of the 

30 second user-terminal from the second virtual private network to the first virtual 
private network and forwards it to the switching means SM that finally performs 
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the switch. At that time both the second and the first user-terminal form part of 
the same private network. 

This means that the communication between the first user-terminal 
and the second user-terminal further can be established according to the 
5 previously mentioned procedures that are well known by persons skilled in the 
art. 

The user-terminal connect notification sending means HCNSM 
further sends the updated registration information to the subscriber data server 
at connecting of said second user-terminal to the first virtual private network. 
10 It is further to be remarked that any other communications network 

could have been described in this embodiment. 

Another further remark is that the network as described in the 
previous embodiment may act as a sub-network of large network consisting of a 
number of these networks. In this way the network consists of a number of 
15 distributed subscriber data servers co-operating in order to perform the method 
as described for any of the sub-networks. 

Although the above embodiment of the invention has been 
described by means of functional blocks, their detailed realisation based on this 
functional description should be obvious for a person skilled in the art and is 
20 therefore not described. 

While the principles of the invention have been described above in 
connection with specific apparatus, it is to be clearly understood that this 
description is made only by way of example and not as a limitation on the scope 
of the invention, as defined in the appended claims. 
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1. Method for connecting a first user-terminal (UT1) to a second 
user-terminal (UT2) over a network such as the internet and said network 
5 containing a plurality of user-terminals (UT1, UT2) and a plurality of 
network access servers (NASI, NAS2, NAS3) each of said plurality of 
user-terminals (UT1, UT2) being coupled to a respective network access 
server of said plurality of network access servers (NASI , NAS2, NAS3), 
CHARACTERISED IN THAT said method comprises the steps of: 

10 a. at connection of said second user-terminal (UT2) to its 

respective network access server (NASI) sending connection information 
by said respective network access server (NASI) to a subscriber data 
server (SDS) included in said network and coupled to each network access 
server (NASI, NAS2, NAS3); 

15 b. updating a database of said subscriber data server (SDS) 

with said connection information; 

c. handling by said subscriber data server (SDS) of an incoming 
call request from said first user-terminal (UT1) in order to establish a 
connection between said first user-terminal (UT1) and said second user- 

20 terminal (UT2) said first user-terminal (UT1) being connected to a first 
virtual private network, said second user-terminal (UT2) being connected 
to a second virtual private network; 

d. searching in said database of said subscriber data server 
(SDS) for connection information of said second user-terminal (UT2); 

25 e. said subscriber data server (SDS) determining said 

respective network access server (NASI) connected to said second user- 
terminal (UT2), using said connection information; 

f. notifying said second user-terminal (UT2) about said 
requesting of said communication by said first user-terminal (UT1); 
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g. said second user-terminal (UT2) initiating and controlling a 
switch-over of said connection of said second user-terminal (UT2) from 
said second virtual private network to said first virtual private network; 

h. said respective network access server (NASI) of said second 
5 user-terminal (UT2) switching said connection of said second user- 
terminal (UT2) from said second virtual private network to said first virtual 
private network; and 

i. At switch-over of said connection of said second user- 
terminal (UT2) from said second virtual private network to said first virtual 

10 private network sending connection information by said respective network 
access server (NASI) to said subscriber data server (SDS). 


2. Method according to claim 1, CHARACTERISED IN THAT 
15 said step of notifying said second user-terminal (UT2) about said 

requesting of said communication by said first user-terminal (UT1) is 
performed according to the following steps of: 

a. receiving said incoming call request of said subscriber data 
server (SDS) at said respective network access server (NASI) connected 

20 to said second user-terminal (UT2); and 

b. said respective network access server (NASI) connected to 
said second user-terminal (UT2) sending said incoming call request of said 
first user-terminal (UT1) to said second user-terminal (UT2). 


25 3. Method according to claim 1, CHARACTERISED IN THAT 

said step of notifying said second user-terminal (UT2) about said 
requesting of said communication by said first user-terminal (UT1) is 
performed over a transparent connection between said subscriber data 
server (SDS) and said second user-terminal (UT2) via said respective 
30 network access server (NASI) connected to said second user-terminal 
(UT2). 
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4. Method according to claim 1, CHARACTERISED IN THAT 

said method further comprises before step c, the steps of: 

a. receiving said incoming call request of said first user-terminal 
(UT2) at said respective network access server (NAS2) connected to said 

5 first user-terminal (UT1); and 

b. said respective network access server (NAS2) connected to 
said first user-terminal (UT1) sending said incoming call request of said 
first user-terminal (UT1) to said subscriber data server (SDS). 


10 5. Method according to claim 1, CHARACTERISED IN THAT 

said method further comprises before step c, the step of sending said 
incoming call request of said first user-terminal (UT1) over a transparent 
connection between said first user-terminal (UT1) and said subscriber data 
server (SDS) via said network access server (NAS2) connected to said 
15 first user-terminal. 


6. Network Access Server (NASI) for enabling a connection 
between a first user-terminal (UT1) and a second user-terminal (UT2) over 
a network such as the internet, said network containing a plurality of user- 
20 terminals (UT1, UT2) and a plurality of network access servers (NASI, 
NAS2, NAS3) each of said plurality of user-terminals (UT1, UT2) being 
coupled to a respective network access server of said plurality of network 
access servers (NASI, NAS2, NAS3), 

CHARACTERISED IN THAT said network access server (NASI) comprises 
25 the following means to enable said connection using the method according 
to claim 1 : 

a. switch notification reception means (SNRM), adapted to receive a 
request from said second user-terminal (UT2) to initiate a switch-over of a 
connection of said second user-terminal (UT2) from a second virtual private 
30 network to a first virtual private network; 
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b. switching means (SM), coupled with an input to an output of said 
switch notification reception means (SNRM) and adapted to perform said 
switch-over of said connection of said second user-terminal (UT2) from said 
second virtual private network to said first virtual private network; and 
5 c. user-terminal connect notification sending means (HCNSM), 

coupled with an input to an output of said switching means (SM) and adapted to 
send connection information to said subscriber data server (SDS) at connecting 
of said second user-terminal (UT2) to said respective network access server 
(NASI) and at switch-over of said connection of said second user-terminal 
10 (UT2) from said second virtual private network to said first virtual private 
network. 

7. Network access server (NASI) according to claim 6, 
CHARACTERISED IN THAT said network access server (NASI) further 

15 comprises: 

a. connection establishment request reception means (CERRM1), 
adapted to receive a connection request from said subscriber data server 
(SDS) to establish said connection between said first user-terminal (UT1) 
connected to said first virtual private network and said second user-terminal 

20 (UT2) connected to said second virtual private network via said respective 
network access server (NASI); and 

b. connection establishment request sending means (CERSM2), 
coupled with an input to an output of said connection establishment requesting 
reception means (CERRM1) and adapted to notify said second user-terminal 

25 (UT2) about an incoming call from said first user-terminal (UT1). 

8. Network Access Server (NAS2), for enabling a connection 
between a first user-terminal (UT1) and a second user-terminal (UT2) over 
a network such as the internet, said network containing a plurality of user- 

30 terminals (UT1, UT2) and a plurality of network access servers 

(NASI ,NAS2, NAS3) each of said plurality of user-terminals (UT1, UT2) 


being coupled to a respective network access server of said plurality of 
network access servers (NAS1,NAS2, NAS3), CHARACTERISED IN THAT 
said network access server (NAS2) comprises the following means to 
enable said connection using the method according to claim 2: 
5 a. connection establishment request reception means (CERRM4), 

adapted to receive a connection request from said first user-terminal (UT1) to 
establish said connection between said first user-terminal (UT1) connected to 
said first virtual private network and said second user-terminal (UT2) connected 
to said second virtual private network; and 
10 b. connection establishment request sending means (CERSM4), 

coupled with an input to an output of said connection establishment requesting 
reception means (CERRM4) and adapted to notify said subscriber data server 
(SDS) about an incoming call from said first user-terminal (UT1). 

15 9. Network access server according to claim 6, CHARACTERISED 

IN THAT said Network access server further comprises: 

a. connection establishment request reception means (CERRM2), 
adapted to receive a connection request from said first user-terminal (UT1) to 
establish said connection between said first user-terminal (UT1) connected to 

20 said first virtual private network and said second user-terminal (UT2) connected 
to said second virtual private network; and 

b. connection establishment request sending means (CERSM3), 
coupled with an input to an output of said connection establishment requesting 
reception means (CERRM2) and adapted to notify said subscriber data server 

25 (SDS) about an incoming call from said first user-terminal (UT1). 

10. Subscriber Data Server (SDS), for enabling a connection of a first 
user-terminal (UT1) to a second user-terminal (UT2) over a network such as 
the internet, said network containing a plurality of user-terminals (UT1, 
30 UT2) and a plurality of network access servers (NASI, NAS2, NAS3) each 
of said plurality of user-terminals (UT1, UT2) being coupled to a respective 


network access server of said plurality of network access servers (NASI, 
NAS2, NAS3) and said subscriber data server (SDS) being coupled to 
each network access server of said plurality of network access servers 
(NASI, NAS2, NAS3), said subscriber data server comprises the following 
means to enable said connection using the method according to claim 1: 

a. user-terminal connect notification reception means (UTCNRM), 
adapted to receive said connection information at connection of said second 
user-terminal (UT2) to said respective network access server (NASI) and at 
switch-over of said connection of said second user-terminal (UT2) from said 
second virtual private network to said first virtual private network; 

b. user-terminal connect notification updating means (UTCNUM) 
coupled with an input to an output of said user-terminal connect notification 
reception means (UTCNRM) and adapted to update a database of said 
subscriber data server (SDS) with said connection information; 

c. connection establishment request reception means (CERRM), 
adapted to receive a connection request from said first user-terminal (UT1) to 
establish a connection between said first user-terminal (UT1) connected to a 
first virtual private network and said second user-terminal (UT2) connected to 
said second virtual private network; 

d. connection information searching means (RISM), coupled with an 
input to an output of said connection establishment request reception means 
(CERRM) and adapted to search in said database of said subscriber data 
server (SDS) for connection information of said second user-terminal (UT2); 
and 

e. connection establishment request sending means (CERSM1), 
coupled with an input to an output of said Connection information searching 
means (RISM) and adapted to notify said second user-terminal (UT2) about an 
incoming call from said first user-terminal (UT1). 

11. Second user-terminal (UT2), for inclusion in a network such as 
the internet containing a plurality of such user-terminals and a plurality of 
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network access servers (NASI, NAS2, NAS3) each of said plurality of 
user-terminals (UT1 , UT2) being coupled to a respective network access 
server of said plurality of network access servers (NASI, NAS2, NAS3), 
CHARACTERISED IN THAT said second user-terminal (UT2) comprises the 
5 following means for enabling a connection between a first user-terminal 
(UT1) and itself over said network using a method according to claim 1: 

a. connection establishment request reception means (CERRM3), 
adapted to receive a connection request from said first user-terminal (UT1) via 
its respective network access server (NAS2) to establish a connection to said 

10 second user-terminal (UT2); 

b. incoming call handling means (ICHM), coupled with an input to an 
output of said connection establishment request reception means (CERRM3) 
and adapted to handle said connection request from said first user-terminal 
(UT1); and 

15 c. switch requesting means (SRM), coupled with an input to an 

output of said incoming call handling means (ICHM) and adapted to request 
said respective network access server (NASI) to switch said connection of said 
second user-terminal (UT2) from a second virtual private network to a first 
virtual private network. 

20 

12. Software module for running on a processing system for 
inclusion in a Subscriber Data Server (SDS) and for enabling a connection of a 
first user-terminal (UT1) to a second user-terminal (UT2) over a network 
such as the internet, said network containing a plurality of user-terminals 

25 (UT1 , UT2) and a plurality of network access servers (NASI , NAS2, 

NAS3) each of said plurality of user-terminals (UT1, UT2) being coupled to 
a respective network access server of said plurality of network access 
servers (NASI, NAS2, NAS3) and said subscriber data server (SDS) being 
coupled to each network access server of said plurality of network access 

30 servers (NASI, NAS2, NAS3), said software module comprises the 
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following software sub-modules to enable said connection using the 
method according to claim 1: 

a. user-terminal connect notification reception sub-module, adapted 
to receive said connection information at connection of said second user- 

5 terminal (UT2) to said respective network access server (NASI) and at switch- 
over of said connection of said second user-terminal (UT2) from said second 
virtual private network to said first virtual private network; 

b. user-terminal connect notification updating sub-module, co- 
operating with said user-terminal connect notification reception sub-module 

1 0 % and adapted to update a database of said subscriber data server (SDS) with 
said connection information; 

c. connection establishment request reception sub-module, 
adapted to receive a connection request from said first user-terminal (UT1) to 
establish a connection between said first user-terminal (UT1) connected to a 

15 first virtual private network and said second user-terminal (UT2) connected to 
said second virtual private network; 

d. connection information searching sub-module, co-operating said 
connection establishment request reception sub-module and adapted to 
search in said database of said subscriber data server (SDS) for connection 

20 information of said second user-terminal (UT2); and 

e. connection establishment request sending sub-module, co- 
operating with said connection information searching sub-module and adapted 
to notify said second user-terminal (UT2) about an incoming call from said first 
user-terminal (UT1). 


30 


13. Software module for running on a processing system for 
inclusion in a second user terminal (UT2) and for inclusion in a network such as 
the internet containing a plurality of such user-terminals and a plurality of 
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network access servers (NASI, NAS2, NAS3) each of said plurality of 
user-terminals (UT1, UT2) being coupled to a respective network access 
server of said plurality of network access servers (NASI, NAS2, NAS3), 
CHARACTERISED IN THAT said software module comprises the following 
5 software sub-modules for enabling a connection between a first user- 
terminal (UT1) and itself over said network using a method according to 
claiml : 

a. connection establishment request reception sub-module, adapted 
to receive a connection request from said first user-terminal (UT1) via its 

10 respective network access server (NAS2) to establish a connection to said 
second user-terminal (UT2); 

b. incoming call handling sub-module, co-operating with said 
connection establishment request reception sub-module and adapted to handle 
said connection request from said first user-terminal (UT1); and 

15 c. switch requesting sub-module, co-operating with said incoming 

call handling sub-module and adapted to request said respective network 
access server (NASI) to switch said connection of said second user-terminal 
(UT2) from a second virtual private network to a first virtual private network. 


-21 - 


ABSTRACT 

METHOD FOR CONNECTING A FIRST USER-TERMINAL TO A SECOND 
USER-TERMINAL, RELATED DEVICES AND RELATED SOFTWARE 
MODULES 

The present invention relates to a method for connecting a first user- 
terminal to a second user-terminal over a network such as the internet. This 
network contains a plurality of user-terminals and a plurality of network access 
servers where each of this plurality of user-terminals is coupled to a respective 
network access server of this plurality of network access servers. 

If the second user-terminal connects to its respective network 
access server, this network access server sends connection information to the 
subscriber data server. At reception of the connection information the database 
of the subscriber data server is updated with this connection information. 

The subscriber data server handles an incoming call request from a 
first user-terminal in order to establish a connection between the first user- 
terminal that is connected to a first virtual private network and the second user- 
terminal that is connected to a second virtual private network. The subscriber 
data server at first searches in its database for connection information of the 
second user-terminal and then determines the respective network access 
server that is connected to the second user-terminal based on the determined 
connection information. Then the second user-terminal is notified about the 
request for communication by the first user-terminal. The second user-terminal 
initiates and controls a switch-over of the connection of the second user- 
terminal from the second virtual private network to the first virtual private 
network. The respective network access server of the second user-terminal 
switches the connection of the second user-terminal from the second virtual 
private network to the first virtual private network. Then at the switch-over of the 
connection of the second user-terminal from the second virtual private network 
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to the first virtual private network there is also connection information sent by 
the adjacent respective network access server to the subscriber data server. 
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